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Claims 

1. A method for enabling the monitoring of data associated with 
a telecommunication user (1), said data being transmitted 
over a telecommunication network (4), by transmission of 
copies of the data to at least one listening station (LEA 6; 
7; 8; 9), 

wherein a copy of the data is sent by a switching device 
(VSGSN; HSGSN etc.) to a monitoring handling device (CIH 14) 
and is in turn sent by the latter (CIH 14) to one (7) of a 
number of addresses of listening stations (LEA 6; 7; 8; 9) 
known to it (CIH 14) in each case, 
characterized in that 

the monitoring handling device (CIH 14) accesses a memory 
containing a list of keys for listening stations (LEA 
6/7/8/9) and transmits data in encrypted form to a listening 
station (LEA 6/7/8/9) using the key for said listening 
station (LEA 6/7/8/9) . 

2. The method according to one of the preceding claims [sic], 
characterized in that 

only the monitoring handling device (CIH 14) knows the 
addresses (LEA IP address of 6; 7; 8; 9) of the listening 
stations (LEA 6; 7; 8; 9), and in particular has stored said 
addresses in a table. 

3. The method according to one of the preceding claims, 
characterized in that 

the telecommunication network is a public land mobile 
network. 

4. The method according to one of the preceding claims, 
characterized in that 
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the telecommunication network is a, packet-switched network, 
in particular an IP protocol network. 

5. The method according to one of the preceding claims, 
characterized in that 

the switching devices (VSGSN 3; HSGSN . . . ) send the copies of 
the data to be intercepted to an interface switching device 
(border gateway 11; 12) which knows the address of the 
monitoring handling device (CIH 14), and in particular has 
stored said address in a memory. 

6. The method according to one of the preceding claims, 
characterized in that 

the listening stations (LEA 6; 7; 8; 9) have different 
addresses (LEA IP address) which are known to the monitoring 
handling device (CIH) . 

7. The method according to one of the preceding claims, 
characterized in that 

the monitoring handling device (14) is located in the same 
network as the listening stations (7 to 9) . 

8. The method according to one of the preceding claims, 
characterized in that 

a security tunnel, in particular an IPsec tunnel, is set up 
between the monitoring handling device (14) and the 
interface switching devices (border gateway 11, 12) or will 
be set up for the purpose of monitoring a call. 

9. A device (CIH 14), in particular for performing the method 
according to one of the preceding claims, 

having an interface to at least one switching device (border 
gateway 11, 12) for receiving data to be intercepted, 
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having a memory containing a list of addresses and keys 
of a plurality of listening stations (6; 7; 8; 9), 

having an interface for transmitting data to be 
intercepted from a terminal device (1), said data having 
been received by a switching device (11) via the first 
interface, to an IP address of a listening station (6; 7; 
8; 9), said address having been identified on the basis of 
the identity of the user (MSISDN, ISDN, MEI etc.) and the 
list stored in a memory in the device (14) . 



